The app
OpenCode Mobile sends network requests to exactly one host: the OpenCode server you configured. It has no analytics SDK, no crash reporting service, no advertising identifier, and no account system. There is no OpenCode Mobile backend for it to phone home to.
The app stores three things on your device:
- The server URL and password. The password is sealed with AES-256-GCM under a key generated in the Android keystore. The key is not exportable and does not leave the device.
- Your settings. Theme family, dark mode preference and the last project you opened, in app private storage.
- Cached session data. Nothing is cached beyond the current process except the settings above.
Uninstalling the app removes all of it, and the "Disconnect and forget password" action in Settings removes the connection immediately.
What leaves your phone
Prompts, attachments, file paths you mention, and your server password as Basic auth, all sent to the server you chose. If that server is reachable from the internet, it is reachable because you made it so. Your prompts go to whichever model provider your server is configured to use, under that provider's terms, not ours.
The one thing to be clear about. This app is a client. It does not proxy, log or relay anything, so there is no copy of your work anywhere but on your machine and wherever your model provider keeps it.
This website
The site is static files served by GitHub Pages. There are no cookies, no analytics, no tracking pixels and no advertising. GitHub, as the host, sees the requests needed to serve the page and applies its own privacy statement.
One local value is written to your browser: ocm-theme in
localStorage, which remembers whether you picked light or dark
mode. It never leaves your device and you can clear it from your browser
settings at any time.
The page loads the Geist typeface from Google Fonts, which means Google receives your IP address and user agent when the font is fetched. That is the only third party request the site makes. If that matters to you, the page still reads correctly with the system font.
Downloads
The APK is hosted on GitHub Releases. Downloading it is a request to GitHub, and their privacy statement applies to that request. The app is signed, and the release workflow verifies the signature and the version code before publishing.
Changes
If this policy changes, the date at the top changes with it. The history of this file is public in the repository, so you can diff any revision against the last.
Contact
Questions or a correction: open an issue on the repository.